DevSecOps Security Lead for Critical Infrastructure

Trinnex; Meridian (ID); On-site; USD 102,000 - 179,000; Full time

Job summary

Trinnex is seeking a Senior Cyber Security Analyst to protect critical software systems for water utilities. You’ll focus on securing the SDLC, embedding security controls, and leading incident response while collaborating with engineering teams to reduce risk and improve resilience.

The role emphasizes threat detection, vulnerability management, and secure development practices to strengthen the organization’s security posture across cloud-native environments.

Qualifications

• Bachelor’s degree required; six years of cybersecurity experience preferred.
• Experience with incident response, threat hunting, and vulnerability management in complex environments.
• Ability to lead security monitoring, forensics, and remediation within the SDLC.

Responsibilities

• Conduct advanced security monitoring and develop rules to detect threats.
• Lead incident response for complex events including forensics and root cause analysis.
• Design and execute vulnerability assessments and simulated attacks.
• Remediate vulnerabilities with engineering teams and strengthen secure coding practices.
• Review security controls and drive remediation aligned with regulations and frameworks.
• Develop threat intelligence and defense strategies with the team.
• Mentor junior analysts and help build security capabilities.
• Support enterprise security strategies aligned with business objectives.

Skills

Security monitoring

Incident response

Vulnerability management

Secure SDLC

IaC security

Cloud security

Threat intelligence

Communication

Team mentoring

Education

Bachelor’s Degree

Tools

Mend

GCP

Kubernetes

Terraform

Job description

Trinnex is seeking a Senior Cyber Security Analyst to protect critical software systems for water utilities. You’ll focus on securing the SDLC, embedding security controls, and leading incident response while collaborating with engineering teams to reduce risk and improve resilience.

The role emphasizes threat detection, vulnerability management, and secure development practices to strengthen the organization’s security posture across cloud-native environments.